In cybersecurity, targets refer to individuals, groups, or organizations that are subject to detrimental activities by cyber criminals or foreign intelligence entities. Identifying targets helps assess capabilities, support investigations, and protect information systems from threats and vulnerabilities. Targets can include specific industries, businesses, government agencies, or political groups. In the context of the Common Criteria computer security standard, a Security Target (ST) defines the security and functional requirements for a given information system product, known as the Target of Evaluation (TOE).

Types of Cybersecurity Targets

Cybersecurity targets encompass a wide range of entities and systems that threat actors aim to compromise. These targets can vary from information systems to political groups, with attackers often having long-term goals in mind. Some common types of cybersecurity targets include:

• Information systems: Computer systems, servers, and databases

• Networks: Communication networks and industrial control systems

• Devices: Personal and organizational devices, such as smartphones and laptops

• Data: Confidential or sensitive information, including business data and personal information

Identifying Vulnerable Targets

Identifying vulnerable targets is crucial in cybersecurity to protect information systems and data from sophisticated adversaries. By understanding common attack vectors and recognizing potential weaknesses, organizations can better defend against targeted attacks. Key aspects to consider when identifying vulnerable targets include:

• Expertise: The level of sophistication and resources of the adversary

• Attack methods: Common techniques used in targeted attacks, such as intelligence gathering and point of entry

• Security Target: A document defining the security and functional requirements for a specific information system product

• Industry focus: Certain industries may be more susceptible to targeted attacks due to the nature of their data or operations

Protecting High-Value Targets

Protecting high-value targets is essential to maintain the confidentiality, integrity, and availability of sensitive information and systems. Employing access control mechanisms, encryption, and intrusion detection can help prevent unauthorized access and data breaches. Additionally, risk management and vulnerability assessment play a crucial role in addressing potential threats and developing appropriate countermeasures.

Challenges in protecting high-value targets include constantly evolving threats, insider risks, supply chain vulnerabilities, limited resources, and the complexity of systems. Collaboration between agencies and organizations is vital for sharing information, resources, and expertise, enabling a coordinated response to security incidents and the development of effective security measures.

The Impact of Compromised Targets

The impact of compromised targets can have severe consequences for businesses and individuals, affecting various aspects of their operations and lives:

• Business consequences: Data breaches, financial losses, reputational damage, and legal ramifications

• Individual consequences: Identity theft, financial data loss, and personal data exposure

• Preventive measures: Access control, encryption, intrusion detection, and risk management